This policy explains what personal data Royal Scents collects, why we collect it, and what rights you have over it. It applies to royalscents.co.uk.
Who we are
Royal Scents is the data controller for the personal data described here.
Address: Tramway Offices, 901 Mellor Street, Rochdale, OL12 6AA, United Kingdom
Contact: via our contact page
What we collect
| Data | When | Why | Lawful basis |
|---|---|---|---|
| Name, email, delivery and billing address, phone number | When you place an order | To take payment, fulfil and deliver your order, and handle returns | Performance of a contract |
| Payment card details | At checkout | To take payment — handled entirely by our payment processor. We never see or store your full card number. | Performance of a contract |
| Account details, if you create an account | On registration | To let you view order history and check out faster | Performance of a contract |
| Name, email and message | When you use the contact form | To answer your enquiry | Legitimate interests — responding to you |
| Email address | If you opt in to marketing | To send you offers and new-arrival news | Consent — withdrawable at any time |
| IP address, browser, pages viewed | When you browse the site | Security, fraud prevention, and understanding how the site is used | Legitimate interests |
Who we share it with
We do not sell your personal data. We share it only with the service providers we need to run the shop:
- Payment processing — our checkout is powered by WooPayments (Automattic Inc. / Stripe). They process your card details directly; we receive only a confirmation and the last four digits.
- Delivery — your name, address and, where you provide it, phone number and email are shared with our carrier so they can deliver and let you track your parcel.
- Hosting — our website and its database are hosted by Hostinger.
- Analytics and advertising — where you have consented, Google may receive usage data via Google for WooCommerce.
- Where the law requires it — for example, to comply with a court order or to prevent fraud.
Some of these providers operate outside the UK. Where personal data is transferred internationally, it is protected by UK adequacy regulations or by standard contractual clauses.
How long we keep it
- Order and transaction records — six years after the end of the relevant tax year, as UK tax law requires.
- Account data — until you ask us to delete your account.
- Contact form enquiries — up to 24 months.
- Marketing consent — until you unsubscribe.
Cookies
We use cookies that are strictly necessary for the site to work — remembering your basket, keeping you logged in, and securing checkout. These cannot be switched off. We may also use optional analytics and advertising cookies, which are only set with your consent. You can clear or block cookies through your browser settings, though strictly necessary cookies are required for checkout to function.
Your rights
Under UK GDPR you have the right to:
- Access the personal data we hold about you
- Have inaccurate data corrected
- Have your data erased, where we have no overriding legal obligation to keep it
- Restrict or object to how we process it
- Receive your data in a portable format
- Withdraw consent at any time, where consent is the basis we rely on
To exercise any of these, contact us through the contact page. We will respond within one month.
Marketing
We only send marketing email if you have opted in, or if you have bought from us and we are contacting you about similar products. Every marketing email has an unsubscribe link, and you can opt out at any time by asking us directly.
Security
The site runs over HTTPS. Payment card data is processed by our payment provider and never stored on our servers. We restrict access to personal data to those who need it to run the shop.
Children
Our site is not directed at children and we do not knowingly collect data from anyone under 16.
Complaints
If you are unhappy with how we have handled your personal data, please tell us first so we can put it right. You also have the right to complain to the UK’s data protection regulator:
Information Commissioner’s Office — ico.org.uk/make-a-complaint — helpline 0303 123 1113.
Changes to this policy
We may update this policy from time to time. The date below shows when it was last changed.
Last updated: 26 July 2026.